{"id":50859,"date":"2025-08-10T13:14:18","date_gmt":"2025-08-10T05:14:18","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/50859.html"},"modified":"2025-08-10T13:14:18","modified_gmt":"2025-08-10T05:14:18","slug":"iptables%e9%98%b2%e7%81%ab%e5%a2%99%e5%91%bd%e4%bb%a4%e5%85%a8%e9%9b%86%e5%90%88","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/50859.html","title":{"rendered":"iptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408"},"content":{"rendered":"

\u76ee\u5f55<\/p>\n

\n

\u9996\u5148\u5148\u4ecb\u7ecd\u4e00\u4e0biptables\u7684\u56db\u8868\u4e94\u94fe<\/p>\n

1.\u5b89\u88c5\u914d\u7f6etables<\/p>\n

2.iptables\u547d\u4ee4<\/p>\n

3.iptables\u4f7f\u7528\u6848\u4f8b<\/p>\n

1.\u7981\u7528\u7aef\u53e3<\/p>\n

2.\u5220\u9664\u89c4\u5219<\/p>\n

3.\u9650\u5236\u6765\u6e90IP\u5730\u5740<\/p>\n

4.\u9650\u5236\u7f51\u6bb5<\/p>\n

5.\u9650\u5236192.168.100.7\u4e0d\u80fd\u8bbf\u95ee61\u768480\u7aef\u53e3<\/p>\n

6.\u5bf9\u6e90IP\u8fdb\u884c\u53d6\u53cd<\/p>\n

7.\u4fee\u6539\u9ed8\u8ba4\u7684\u89c4\u5219<\/p>\n

8.\u591a\u7aef\u53e3\u914d\u7f6e<\/p>\n

9.\u7981ping<\/p>\n

4.NAT\u5b9e\u73b0\u5171\u4eab\u4e0a\u7f51<\/p>\n

01.SNAT: \u6e90\u5730\u5740\u8f6c\u6362，\u8ba9\u5185\u7f51\u53ea\u901a\u8fc7\u4e00\u53f0\u670d\u52a1\u5668\u51fa\u5916\u7f51<\/p>\n

02.DNAT：\u76ee\u6807\u5730\u5740\u8f6c\u6362<\/p>\n

\n
iptables\u7684\u56db\u8868\u4e94\u94fe<\/h6>\n

\u56db\u8868：<\/p>\n

1)filter：\u8fc7\u6ee4\u672c\u673a\u6570\u636e\u5305 \u7ba1\u7406INPUT\u3001FORWARD\u3001OUTPUT\u4e09\u4e2a\u94fe 2)nat：\u7f51\u7edc\u5730\u5740\u8f6c\u6362 \u7ba1\u7406PREROUTING\u3001POSTROUTING\u3001OUTPUT\u4e09\u4e2a\u94fe 3)mangle 4)raw<\/p>\n

\u4e94\u94fe：<\/p>\n

PREROUTING：\u9884\u8def\u7531，\u6240\u6709\u6570\u636e\u5305\u8fdb\u5165\u8def\u7531\u524d\u7531\u6b64\u94fe\u8d1f\u8d23 INPUT：\u8fdb\u7ad9，\u6570\u636e\u5305\u76ee\u6807\u662f\u672c\u673a\u7531\u6b64\u94fe\u8d1f\u8d23 OUTPUT：\u51fa\u7ad9，\u6570\u636e\u5305\u4ece\u672c\u673a\u53d1\u9001\u7531\u6b64\u94fe\u8d1f\u8d23 FORWORD：\u8f6c\u53d1，\u6570\u636e\u5305\u7684\u76ee\u6807\u5730\u5740\u662f\u5176\u5b83\u5916\u90e8\u5730\u5740\u7531\u6b64\u94fe\u8d1f\u8d23 POSTROUTING：\u540e\u8def\u7531，\u6240\u6709\u6570\u636e\u5305\u79bb\u5f00\u672c\u673a\u65f6\u7531\u6b64\u94fe\u8d1f\u8d23<\/p>\n

\"img\"<\/p>\n

\u4e0b\u9762\u5f00\u59cbiptables\u7684\u914d\u7f6e\u65b9\u5f0f\u548c\u547d\u4ee4<\/p>\n

1.\u5b89\u88c5\u914d\u7f6etables<\/h6>\n

1.\u505c\u6b62\u81ea\u5e26\u7684\u9632\u706b\u5899
\n[root@m01 ~]# systemctl stop firewalld
\n[root@m01 ~]# systemctl disable firewalld<\/p>\n

2.\u5b89\u88c5tables
\n[root@m01 ~]# yum -y install iptables-services<\/p>\n

3.\u52a0\u8f7d\u5bf9\u5e94\u7684\u6a21\u5757（\u4e34\u65f6）
\n[root@m01 ~]# systemctl stop firewalld
\n[root@m01 ~]# systemctl disable firewalld
\n[root@m01 ~]# modprobe ip_tables
\n[root@m01 ~]# modprobe iptable_filter
\n[root@m01 ~]# modprobe iptable_nat
\n[root@m01 ~]# modprobe ip_conntrack
\n[root@m01 ~]# modprobe ip_conntrack_ftp
\n[root@m01 ~]# modprobe ip_nat_ftp
\n[root@m01 ~]# modprobe ipt_state<\/p>\n

4.\u6c38\u4e45\u751f\u6548
\n\u5199\u5165\/etc\/profile \/etc\/rc.local
\ncat >>\/etc\/rc.local<<EOF
\nmodprobe ip_tables
\nmodprobe iptable_filter
\nmodprobe iptable_nat
\nmodprobe ip_conntrack
\nmodprobe ip_conntrack_ftp
\nmodprobe ip_nat_ftp
\nmodprobe ipt_state
\nEOF<\/p>\n

5.\u542f\u52a8，\u52a0\u5165\u5f00\u673a\u81ea\u542f
\n[root@m01 ~]# systemctl start iptables
\n[root@m01 ~]# systemctl enable iptables<\/p>\n

2.iptables\u547d\u4ee4<\/h6>\n

1.\u67e5\u770b\u9632\u706b\u5899\u89c4\u5219
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy ACCEPT)
\ntarget prot opt source destination
\nACCEPT all — 0.0.0.0\/0 0.0.0.0\/0 state RELATED,ESTABLISHED
\nACCEPT icmp — 0.0.0.0\/0 0.0.0.0\/0
\nACCEPT all — 0.0.0.0\/0 0.0.0.0\/0
\nACCEPT tcp — 0.0.0.0\/0 0.0.0.0\/0 state NEW tcp dpt:22
\nREJECT all — 0.0.0.0\/0 0.0.0.0\/0 reject-with icmp-host-prohibited<\/p>\n

Chain FORWARD (policy ACCEPT)
\ntarget prot opt source destination
\nREJECT all — 0.0.0.0\/0 0.0.0.0\/0 reject-with icmp-host-prohibited<\/p>\n

Chain OUTPUT (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n

2.\u6e05\u7a7a\u9ed8\u8ba4\u7684\u89c4\u5219
\n[root@m01 ~]# iptables -F
\n[root@m01 ~]# iptables -X
\n[root@m01 ~]# iptables -Z
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n

Chain FORWARD (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n

Chain OUTPUT (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n

3.\u4fdd\u5b58\u914d\u7f6e
\n[root@m01 ~]# iptables-save
\n# Generated by iptables-save v1.4.21 on Fri Jul 18 23:54:41 2025
\n*nat
\n:PREROUTING ACCEPT [0:0]
\n:INPUT ACCEPT [0:0]
\n:OUTPUT ACCEPT [1:124]
\n:POSTROUTING ACCEPT [1:124]
\nCOMMIT
\n# Completed on Fri Jul 18 23:54:41 2025
\n# Generated by iptables-save v1.4.21 on Fri Jul 18 23:54:41 2025
\n*filter
\n:INPUT ACCEPT [58:3828]
\n:FORWARD ACCEPT [0:0]
\n:OUTPUT ACCEPT [31:3220]
\nCOMMIT
\n# Completed on Fri Jul 18 23:54:41 2025<\/p>\n

4.\u89c4\u5219\u6062\u590d
\n1）\u91cd\u65b0\u8bfb\u53d6\/etc\/sysconfig\/iptables \u914d\u7f6e\u6587\u4ef6\u4e2d\u7684\u7b56\u7565
\nsystemctl restart iptables
\n2）\u4f7f\u7528\u547d\u4ee4\u6062\u590d
\niptables-restore <\/etc\/sysconfig\/iptables <\/p>\n

3.iptables\u4f7f\u7528\u6848\u4f8b<\/h6>\n
1.\u7981\u7528\u7aef\u53e3<\/h6>\n

-I \u5728\u6700\u4e0a\u9762\u63d2\u5165\u89c4\u5219
\n-A \u5728\u6700\u4e0b\u9762\u8ffd\u52a0\u89c4\u5219<\/p>\n

1.\u7981\u6b62\u8bbf\u95ee61\u768422\u7aef\u53e3
\n[root@m01 ~]# iptables -I INPUT -p tcp –dport 22 -j DORP
\n\u8fd9\u65f6\u4f1a\u53d1\u73b0\u8fdc\u7a0b\u8fde\u63a5\u4e0d\u4e0a\u4e86<\/p>\n

\u89e3\u51b3\u65b9\u6cd5：
\n\u53bb\u670d\u52a1\u5668\u6267\u884c
\n[root@m01 ~]# iptables -I INPUT -s 192.168.100.1 -j ACCEPT
\n\u5141\u8bb8\u672c\u673a\u8fde\u63a5，\u6309\u987a\u5e8f\u4f18\u5148\u7ea7
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy ACCEPT)
\ntarget prot opt source destination
\nACCEPT all — 192.168.100.1 0.0.0.0\/0
\nDROP tcp — 0.0.0.0\/0 0.0.0.0\/0 tcp dpt:22<\/p>\n

Chain FORWARD (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n

Chain OUTPUT (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n

2.\u5220\u9664\u89c4\u5219<\/h6>\n

\u7b2c\u4e00\u79cd\u65b9\u6cd5：\u901a\u8fc7\u5e8f\u53f7\u5220\u9664
\n[root@m01 ~]# iptables -nL –line
\nChain INPUT (policy ACCEPT)
\nnum target prot opt source destination
\n1 ACCEPT all — 192.168.100.1 0.0.0.0\/0
\n2 DROP tcp — 0.0.0.0\/0 0.0.0.0\/0 tcp dpt:22<\/p>\n

Chain FORWARD (policy ACCEPT)
\nnum target prot opt source destination <\/p>\n

Chain OUTPUT (policy ACCEPT)
\nnum target prot opt source destination
\n[root@m01 ~]# iptables -D INPUT 2
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy ACCEPT)
\ntarget prot opt source destination
\nACCEPT all — 192.168.100.1 0.0.0.0\/0 <\/p>\n

Chain FORWARD (policy ACCEPT)
\ntarget prot opt source destination <\/p>\n

Chain OUTPUT (policy ACCEPT)
\ntarget prot opt source destination<\/p>\n

\u7b2c\u4e8c\u79cd\u65b9\u6cd5：\u5c06I\u6216\u8005A\u4fee\u6539\u4e3aD
\n[root@m01 ~]# iptables -D INPUT -s 192.168.100.1 -j ACCEPT
\n\u53ef\u4ee5\u5feb\u901f\u5220\u9664\u4fee\u6539\u9519\u8bef\u7684\u89c4\u5219 <\/p>\n

3.\u9650\u5236\u6765\u6e90IP\u5730\u5740<\/h6>\n

\u62d2\u7edd192.168.100.7\u7684ip\u8bbf\u95ee\u6211
\n[root@m01 ~]# iptables -I INPUT -s 192.168.100.7 -j DROP <\/p>\n

4.\u9650\u5236\u7f51\u6bb5<\/h6>\n

\u62d2\u7edd192.168.100.0\/24\u7f51\u6bb5\u8bbf\u95ee\u6211
\n[root@m01 ~]# iptables -I INPUT -s 172.16.1.0\/24 -j DROP
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy ACCEPT)
\ntarget prot opt source destination
\nDROP all — 172.16.1.0\/24 0.0.0.0\/0 <\/p>\n

5.\u9650\u5236192.168.100.7\u4e0d\u80fd\u8bbf\u95ee61\u768480\u7aef\u53e3<\/h6>\n

[root@m01 ~]# iptables -I INPUT -s 192.168.100.7 -p tcp –dport 80 -j DROP <\/p>\n

6.\u5bf9\u6e90IP\u8fdb\u884c\u53d6\u53cd<\/h6>\n

\u9664\u4e86192.168.100.7,\u5176\u4ed6\u6240\u6709\u7684IP\u5730\u5740\u90fd\u4e0d\u80fd\u8bbf\u95ee\u6211\u7684\u670d\u52a1\u5668
\n[root@m01 ~]# iptables -I INPUT ! -s 192.168.100.7 -j DROP
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy ACCEPT)
\ntarget prot opt source destination
\nDROP all — !192.168.100.7 0.0.0.0\/0 <\/p>\n

7.\u4fee\u6539\u9ed8\u8ba4\u7684\u89c4\u5219<\/h6>\n

1.\u5148\u5141\u8bb8\u81ea\u5df1\u53ef\u4ee5\u8bbf\u95ee
\n[root@m01 ~]# iptables -I INPUT -s 192.168.100.1 -j ACCEPT
\n2.\u4fee\u6539\u9ed8\u8ba4\u89c4\u5219\u4e3a\u62d2\u7edd
\n[root@m01 ~]# iptables -P INPUT DROP
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy DROP)
\ntarget prot opt source destination
\nACCEPT all — 192.168.100.1 0.0.0.0\/0 <\/p>\n

8.\u591a\u7aef\u53e3\u914d\u7f6e<\/h6>\n

\u5141\u8bb8\u8bbf\u95ee80\u548c443\u7aef\u53e3
\n[root@m01 ~]# iptables -I INPUT -p tcp -m multiport –dport 80,443 -j ACCEPT
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy DROP)
\ntarget prot opt source destination
\nACCEPT tcp — 0.0.0.0\/0 0.0.0.0\/0 multiport dports 80,443<\/p>\n

9.\u7981ping<\/h6>\n

\u5148\u4fee\u6539\u9ed8\u8ba4\u89c4\u5219\u4e3a\u5141\u8bb8
\n[root@m01 ~]# iptables -P INPUT ACCEPT
\n\u7981\u6b62192.168.100.7\u7684ip\u6765ping\u6211
\n[root@m01 ~]# iptables -I INPUT -p icmp –icmp-type 8 -s 192.168.100.7 -j DROP
\n[root@m01 ~]# iptables -nL
\nChain INPUT (policy ACCEPT)
\ntarget prot opt source destination
\nDROP icmp — 192.168.100.7 0.0.0.0\/0 icmptype 8<\/p>\n

\u6216\u8005
\n\u901a\u8fc7linux\u64cd\u4f5c\u7cfb\u7edf\u5185\u6838\u53c2\u6570\u914d\u7f6e\u7981ping<\/p>\n

\u8bbe\u7f6e\u4e3a1\u4e3a\u7981ping
\n[root@m01 ~]# echo 1 >\/proc\/sys\/net\/ipv4\/icmp_echo_ignore_all
\n[root@m01 ~]# cat \/proc\/sys\/net\/ipv4\/icmp_echo_ignore_all
\n1
\n\u8bbe\u7f6e\u4e3a0\u5f00\u542fping
\n[root@m01 ~]# echo 0 >\/proc\/sys\/net\/ipv4\/icmp_echo_ignore_all
\n[root@m01 ~]# cat \/proc\/sys\/net\/ipv4\/icmp_echo_ignore_all
\n0<\/p>\n

4.NAT\u5b9e\u73b0\u5171\u4eab\u4e0a\u7f51<\/h6>\n
01.SNAT: \u6e90\u5730\u5740\u8f6c\u6362，\u8ba9\u5185\u7f51\u53ea\u901a\u8fc7\u4e00\u53f0\u670d\u52a1\u5668\u51fa\u5916\u7f51<\/h6>\n

1.iptables\u8bbe\u7f6eSNAT
\n\u5c06\u6765\u6e90IP\u662f172.16.1.0\u7f51\u6bb5\u7684\u6d41\u91cf，\u5168\u90fd\u8f6c\u6362\u6210192.168.100.61\u53bb\u8bbf\u95ee\u5916\u7f51
\n[root@m01 ~]# iptables -t nat -A POSTROUTING -s 172.16.1.0\/24 -j SNAT –to-source 192.168.100.61<\/p>\n

2.\u914d\u7f6e\u5185\u6838\u8f6c\u53d1(\u62e5\u6709\u8def\u7531\u5668\u529f\u80fd)
\n[root@m01 ~]# echo 'net.ipv4.ip_forward = 1' >> \/etc\/sysctl.conf<\/p>\n

3.\u5237\u65b0\u914d\u7f6e
\n[root@m01 ~]# sysctl -p
\nnet.ipv4.ip_forward = 1<\/p>\n

4.\u5185\u7f51\u670d\u52a1\u5668\u914d\u7f6e\u7f51\u5173: 172.16.1.61\u548cDNS
\n[root@web01 ~]# cat \/etc\/sysconfig\/network-scripts\/ifcfg-eth1
\nTYPE=Ethernet
\nBOOTPROTO=none
\nNAME=eth1
\nDEVICE=eth1
\nONBOOT=yes
\nIPADDR=172.16.1.7
\nPREFIX=24
\nGATEWAY=172.16.1.61
\nDNS1=223.5.5.5<\/p>\n

5.\u91cd\u542f\u7f51\u5361
\n[root@web01 ~]# systemctl restart network<\/p>\n

\u4f7f\u7528ADSL\u62e8\u53f7\u7684\u7f51\u7edc:
\n\u6ce8\u610f\u4e8b\u9879: \u516c\u7f51ip\u4e0d\u56fa\u5b9a \u4f7f\u7528 iptables -t nat -A POSTROUTING -s 172.16.1.0\/24 -j MASQUERADE <\/p>\n

02.DNAT：\u76ee\u6807\u5730\u5740\u8f6c\u6362<\/h6>\n

\u914d\u7f6eIP\u5730\u5740\u7aef\u53e3\u6620\u5c04:
\n[root@m01 ~]# iptables -t nat -A PREROUTING -d 192.168.100.61 -p tcp –dport 9000 -j DNAT –to-destination 172.16.1.7:22<\/p>\n

\u8bbf\u95ee192.168.100.61\u76849000\u7aef\u53e3，\u5c31\u662f\u8bbf\u95ee172.16.1.7\u768422\u7aef\u53e3
\n[c:\\\\~]$ ssh 192.168.100.61 9000
\nConnecting to 192.168.100.61:9000…
\nConnection established.
\n[root@web01 ~]# <\/p>\n","protected":false},"excerpt":{"rendered":"

\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb26\u6b21\u3002\u672c\u7bc7\u6587\u7ae0\u6db5\u76d6\u4e86iptables\u7684\u56db\u8868\u4e94\u94fe\uff0c\u547d\u4ee4\u914d\u7f6e\uff0cnat\u5730\u5740\u8f6c\u6362\u7b49\uff0c\u547d\u4ee4\u8be6\u7ec6\u6613\u61c2\uff0c\u6848\u4f8b\u4e30\u5bcc<\/p>\n","protected":false},"author":2,"featured_media":50858,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[58,43,78,497],"topic":[],"class_list":["post-50859","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-server","tag-linux","tag-43","tag-78","tag-497"],"yoast_head":"\niptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/50859.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"iptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb26\u6b21\u3002\u672c\u7bc7\u6587\u7ae0\u6db5\u76d6\u4e86iptables\u7684\u56db\u8868\u4e94\u94fe\uff0c\u547d\u4ee4\u914d\u7f6e\uff0cnat\u5730\u5740\u8f6c\u6362\u7b49\uff0c\u547d\u4ee4\u8be6\u7ec6\u6613\u61c2\uff0c\u6848\u4f8b\u4e30\u5bcc\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/50859.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2025-08-10T05:14:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/08\/20250810051417-68982aa91cb7e.png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/50859.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/50859.html\",\"name\":\"iptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2025-08-10T05:14:18+00:00\",\"dateModified\":\"2025-08-10T05:14:18+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/50859.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/50859.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/50859.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"iptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"iptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/50859.html","og_locale":"zh_CN","og_type":"article","og_title":"iptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"\u6587\u7ae0\u6d4f\u89c8\u9605\u8bfb26\u6b21\u3002\u672c\u7bc7\u6587\u7ae0\u6db5\u76d6\u4e86iptables\u7684\u56db\u8868\u4e94\u94fe\uff0c\u547d\u4ee4\u914d\u7f6e\uff0cnat\u5730\u5740\u8f6c\u6362\u7b49\uff0c\u547d\u4ee4\u8be6\u7ec6\u6613\u61c2\uff0c\u6848\u4f8b\u4e30\u5bcc","og_url":"https:\/\/www.wsisp.com\/helps\/50859.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2025-08-10T05:14:18+00:00","og_image":[{"url":"https:\/\/www.wsisp.com\/helps\/wp-content\/uploads\/2025\/08\/20250810051417-68982aa91cb7e.png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"4 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/50859.html","url":"https:\/\/www.wsisp.com\/helps\/50859.html","name":"iptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2025-08-10T05:14:18+00:00","dateModified":"2025-08-10T05:14:18+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/50859.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/50859.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/50859.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"iptables\u9632\u706b\u5899\u547d\u4ee4\u5168\u96c6\u5408"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/50859","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=50859"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/50859\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media\/50858"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=50859"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=50859"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=50859"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=50859"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}